1. Who is responsible?

Scope Workforce Planner B.V. is responsible for its own processing of website and contact data as described in this policy. Processing of employee data on behalf of employers follows the division of roles in section 2.

Scope Workforce Planner B.V.
Capellalaan 129, 2132 JM Hoofddorp, The Netherlands
Chamber of Commerce 70960968 · Establishment number 000039185346
info@scopeworkforceplanner.com · 023 561 52 42

Use this email address to ask privacy questions or exercise your privacy rights. Put “Privacy” in the subject line. Do not send unsolicited copies of identity documents or employee files.

2. Website, account and employee data

This policy covers the marketing website and business communications with Scope. Opening the existing login or sign-up environment takes you away from this website. That environment’s information and agreements apply there.

When an employer uses the Planner for schedules, hours or other employee data, the employer generally determines the purpose of processing. Scope processes that data on instructions under the data processing agreement. Employees can ask their employer or HR department about that data. Scope supports the controller where agreed and legally required. Scope may itself be responsible for its own purposes, such as business account administration.

3. Which data and for what purpose?

The form requests your name, organisation, email address and message to process your enquiry. You can also email or call directly. Without sufficient contact details, we may be unable to answer your question. Do not include a citizen service number, identity document, medical data, passwords or unnecessary information about others.

4. What does the contact form do?

After you select “Send my request”, your name, organisation, email address and message are sent to FormSubmit over a secure HTTPS connection. The service processes the request and emails it to info@scopeworkforceplanner.com. Your email address is used to respond. The website does not save your input in cookies or browser storage.

FormSubmit is an external recipient of the submitted information and technical request data. Its documentation states that submissions are retained for 30 days in its submission archive. A reCAPTCHA security check may appear during submission and may also process technical data. Read the FormSubmit privacy information and documentation on processing and retention.

This does not apply to technical processing necessary to visit the website, such as delivering webpages through the host.

5. Who receives data?

Data may be accessible to authorised staff and providers of hosting, security, business email and administration where necessary. Appropriate agreements under Article 28 GDPR should be made with parties acting as processors. Not every recipient is a processor. A regulator, for example, may have its own statutory duties.

6. Processing outside the EEA

Whether providers process data outside the European Economic Area is not fully specified here. You can request information about the countries involved and any safeguards. Transfers outside the EEA are subject to the applicable GDPR conditions.

7. Security and retention periods

This website uses HTTPS. Images and fonts are served from the website. The external demo video loads only when you choose to load it.

Data is retained no longer than necessary for its purpose, taking statutory obligations into account. A specific retention period is not available here for every purpose. Contact us to find out which period applies to your data.

8. Your privacy rights

Depending on the processing, you can request access, correction, erasure or restriction. Where the GDPR provides for it, you can also object or request data portability. If processing relies on consent, you can withdraw it without affecting the lawfulness of earlier processing. These rights are not unlimited in every situation.

Send your request to the contact address above. Scope must generally handle it within one month. For complex or multiple requests, the period may be extended by up to two months where the GDPR permits. You will receive an explanation within the first month. Additional identification information may be requested where there is reasonable doubt. A complete identity document should not be requested as standard if a less intrusive check is sufficient.

You may complain directly to the Dutch Data Protection Authority. Contacting Scope first is not a requirement.

9. Cookies, external links and decision-making

Read the cookie and media information for more about this website and external media. Contact requests are followed up by people. The form does not make automated decisions about your request. This information concerns the marketing website, not employee data processing within the Planner.

10. Status and changes

This information about the marketing website is not complete in every respect. Contact us for more information about the processing of your data.